[Previous entry: "A good list of Oracle security check items"] [Next entry: "Tools page updated"]
Ed had an interesting post yesterday about $ tables, DBA views and x$ tables
November 30th, 2004 by Pete
Post to del.icio.us
Post to Furl
I noticed that yesterday on Edward Stanglers weblog that he had made a useful post about the dollar tables, the DBA views and the X$ tables, basically how the data dictionary is broken down. This is a good post giving an overview of these views and tables. It is worth remembering that in Oracle security terms general users should never have access to any of these tables or views. They contain configuration details that can be used to abuse your database. None of these sources of information therefore should be available to normal users. Ed makes a good point that $ tables and X$ tables should not be accessed directly; the information should only be obtained via the official views. What I would add is that you need to be aware of what users can access these tables and views.
Again Ed's post is here.
